CVE-2026-39745

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in the Contact Form to DB plugin by BestWebSoft, affecting versions up to 1.7.6. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using this plugin should prioritize remediation to protect user data and maintain application integrity.